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Via Lundbeck.com - 
users of “contact us” form 
(PV) 








If users of Lundbeck.com use our 
“contact form” for reporting on side 
effects and adverse events 
regarding our medicinal products 
(as patients), we will obtain the 
following data from the patient: 














e Contact information 
(name/initials, address, email 
address) 

e Country 

e Information on date of birth, 
age/age group, gender 

e Information on health and 
medication 

e Sex life/sexual orientation (only if 
reported and relevant’) 

*In general, this category of data 
is not specifically requested and 
collected but only captured and 
processed if reported in 
connection with an adverse 
event report and relevant for the 
medical and scientific 
assessment and evaluation of 
the case 


e Criminal convictions/offences 
(only if reported and relevant*) 
*In general, this category of data 
is not specifically requested and 
collected but only captured and 
processed as part of an adverse 





e It is a legal requirement 
that H. Lundbeck A/S 
collects and processes 
your personal data. We 
are obliged to register, 
monitor and analyse the 
adverse events that are 
reported to Lundbeck and 
to perform medical and 
scientific evaluation of any 
adverse event that may be 
related to a Lundbeck 
product. This is done to 
ensure high standards of 
quality, to enhance patient 
care and patient safety 
and to assess the risk- 
benefit profile of 
medicines 





The legal basis for 
Lundbeck’s collection 
and processing of your 
personal data is: 


e alegal obligation in 
section 53 of the 
Danish Medicines 
Act and section 5 of 
the Danish executive 
order on the 
monitoring of 
adverse reactions 
from medicinal 
products which 
implements parts of 
Chapter 1 and 3 of 
Title IX of Directive 
2001/83/EC of the 
European 
Parliament and of 
the Council of 06 
Nov. 2001, as 
amended by 
Directive 
2010/84/EU of the 
European 
Parliament and of 
the Council of 15 
Dec. 2010 cf. Article 
6 (1) (c) of the 
GDPR; 

e to ensure high 





To continuously ensure 
the safety of our 
products we may 
disclose your personal 
data to relevant local 
health authorities, 
business partners and 
the Lundbeck Group 
companies. 


The legal basis for the 
disclosure is: 


e a legal obligation in 
section 53 of the 
Danish Medicines 
Act and section 6 
and 7 of the Danish 
executive order on 
the monitoring of 
adverse reactions 
from medicinal 
products which 
implements parts of 
Chapter 3 of Title IX 
of Directive 
2001/83/EC of the 
European 
Parliament and of 
the Council of 06 
Nov. 2001, as 


standards of quality amended b 





According to relevant 
pharmacovigilance legislation 
we are obliged to store your 
personal data for the lifetime 
of the product plus additional 
10 years, as a minimum. 
However, the retention period 
of the personal data may be 
longer where union law or 
national law so requires. 














event report related to a legal 
case or an insurance case or 
where the data relevant for the 
medical and scientific 
assessment and evaluation of 
the case 


e Other personal data contained in 
the message or in the attached 
document 


Healthcare professional and 
individuals reporting on behalf of 
patients: 


e Contact information 
(name/initials, address, email 
address) 

e Country 

e HCP profession/title (only HCPs) 

e Other personal data contained in 
the message or in the attached 
document 


The source of data obtained in the 
“contact us” form (PV) is 
relative/individual or healthcare 
professionals reporting on behalf of 
you and publicly available sources 
such as websites or social media 
(in general, these sources are not 
monitored. Due to relevant 
regulation, Lundbeck employees 
that incidentally identify adverse 
events in publicly available sources 
(e.g. social media) are however 
obliged to report those to 
Lundbeck. 








and safety of health 
care and of 
medicinal products 
cf. Article 9(2)(i) of 
the GDPR; and 
criminal convictions: 
section 8(3) of the 
Danish Data 
Protection Act cf. 
Article 10 of the 
GDPR. It is 
Lundbeck’s 
assessment that the 
processing of 
criminal convictions 
is (when relevant) 
necessary for the 
medical and 
scientific 
assessment and to 
ensure high 
standards of quality 
and safety of health 
care and of 
medicinal products 





Directive 
2010/84/EU of the 
European 
Parliament and of 
the Council of 15 
Dec. 2010 cf. Article 
6 (1) (c) of the 
GDPR and 

to ensure high 
standards of quality 
and safety of health 
care and of 
medicinal products 
cf. Article 9(2)(i) of 
the GDPR. 

criminal convictions: 
section 8(4) of the 
Danish Data 
Protection Act cf. 
Article 10 of the 
GDPR. It is 
Lundbeck’s 
assessment that the 
disclosure of 
criminal convictions 
is necessary for the 
medical and 
scientific 
assessment and to 
ensure high 
standards of quality 
and safety of health 
care and of 
medicinal products 














Via Lundbeck.com - 
Users of “contact us” 
form (other inquiries than 
PV) 


Name, telephone number, email 
address 

Name of organization 

Country 

Other personal data contained in 
the message or in the attached 
document 

Type of requested service, if any 


e Providing the requested 


service 


e Handling of inquiries 


The legal basis is 
Lundbeck’s legitimate 
interest in providing the 
requested service and 
handling inquiries, 
including examinations 
in this regard, cf. 
Article 6(1)(f) of the 
GDPR. 


We may disclose your 
personal data to 


e our affiliates within 
the Lundbeck Group 

e other recipients 
depending on your 
inquiry in order to 
handle your request. 


Depending on your 
inquiry, the legal basis 
for the disclosure is 
contract (Article 6(1)(b) 
of the GDPR), consent 
(Articles 6(1)(a) and 
9(2)(a) of the GDPR), 
compliance with a 
legal obligation (Article 
6(1)(c)) and/or 
Lundbeck’s legitimate 
interest in providing 
the requested service 
and handling your 
inquiry, cf. Article 
6(1)(f) of the GDPR. 


Personal data related to your 
requests and inquiries will be 
deleted immediately after 
replying to you unless storage 
for a longer period is required 
under applicable law. 








Via Lundbeck.com - 
Users who order of 
Lundbeck Magazine 





Name, email address, telephone 
number, address 


e Title 
e Company 


Profile (e.g. student, employee 
etc.) 

Type of requested service from 
Lundbeck (Lundbeck Magazine) 
Whether consent for direct 
marketing and processing of 
personal data has been given 





Providing copies of 
Lundbeck Magazine, as 
requested 

Direct marketing 





The legal basis is 
consent, cf. Article 
6(1)(a) of the GDPR 
and Lundbeck’s 
legitimate interest in 
providing you with 
Lundbeck Magazine as 
requested, cf. Article 
6(1)(f) of the GDPR. 








Personal data related to your 
order of the Lundbeck 
magazine will be deleted at 
the latest 1 month after we 
have sent you the requested 
Lundbeck Magazine. 

















Via Lundbeck.com - All 
users of the website (via 
cookies) 





By use of cookies, we may collect 
information on how you use 
lundbeck.com and your online 
behaviour. The type of personal 
data collected are: 


e |P address, including your 
network location 

e Information about your 
computer 

e Type of browser 

e Search words 


Last updated: 12 January 2021 





We use necessary cookies, 
functional cookies, statistical 
and marketing cookies. 
Please see a full description 
of these cookies in our 
Cookie Policy. 





The legal basis is 
consent, cf. article 6 
(1) (a), cf. also the 
Danish Executive 
Order on Cookies. 


For necessary cookies, 
the legal basis is 
Article 6(1)(f) of the 
GDPR. 


Lundbeck has a 
legitimate interest in 
providing the website 
and functionalities to 
users. 





Data collected via 
cookies may be shared 
with our third party 
cookie providers, 
including via plug-ins. 
In certain cases, 
Lundbeck will be 
considered joint 
controller with some of 
these third parties. You 
can read more and find 
a link to the privacy 
notification of these 
third parties in our 
Cookie Policy. 





Cookies and the connected 
collection of personal data will 
be deleted as described in 
the Cookie Policy unless 
storage for a longer period is 
required under applicable 
law. 





